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API developers 
prepare for rise 
in Web app 
programming 

BY JEFF FEINMAN 

Enterprise developers use Web 
application programming inter- 
faces to drive mashups and inte- 
grate social-networking capa- 
bilities into their software. 
According to speakers at 
November's Business of APIs 
Conference in New York City, 
organized by on-demand API 
provider Mashery, that type of 
usage is going to grow and 
expand rapidly. 

"We've moved on to such a 
greater level of sophistication 
with APIs where it's much less 
about visual panache," said John 
Musser, founder of mashup and 
API provider ProgrammableWeb. 
"Today, we're talking about much 
more serious and fundamental 
integrations across the Web, so 
APIs have become that infra- 
structure glue that connects one 
website to another." 

Musser said that Web APIs 
are still in early phases of adop- 
tion and have yet to reach their 
full potential. While there are 
success stories among early 
adopters, such as Google, which 
can have over 4 billion API calls 
a day, there is still lots of room 
for more user consumption. 

"Not everyone jumped into 

the Web feet first back in the 

continued on page 15 ► 



Silverliqht 4 opens the RIA 
door to COM, Windows APIs 



BY DAVID WORTHINGTON 

LOS ANGELES — With Sil- 
verlight 4, Microsoft is looking to 
position its rich application plat- 
form on three pillars: expanding 
beyond the browser, displaying 
rich media and supporting busi- 
ness applications. 

Scott Guthrie, corporate vice 
president of Microsoft's .NET 
developer platform, detailed the 
feature list during his Nov. 18 
keynote at the Professional Devel- 
opers Conference. He began by 
saying that Microsoft is on a 
"fast cadence for Silverlight 
releases," and that it has added 
more capability for running Sil- 
verlight outside of the browser 
beyond what Silverlight 3 intro- 
duced last year. 

For developers, the new soft- 
ware provides a way to access 
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Windows 7 APIs, Component 
Object Model applications and 
local resources, including hard- 
ware. 

Silverlight 3 introduced a 
secure sandbox mode that 
allowed applications to be run 
on the desktop for Mac OS X 
and Windows. Silverlight 4 goes 
further with a trusted mode 
that opens the sandbox so that 



applications can access it, 
Guthrie said. 

On Windows, applications 
may read and write to the file 
system, access hardware devices, 
integrate with Windows 7 APIs 
(such as location) through COM, 
and integrate with COM compo- 
nents. 

COM, which gives developers 
the opportunity to access mil- 



lions of Visual Basic, Win32 and 
custom .NET applications, is fine 
from a security perspective, pro- 
vided it is turned off by default 
and requires consent, said For- 
rester principal analyst Jeffrey 
Hammond. 

Those capabilities "compare 
favorably" to Adobe's AIR plat- 
form for desktop-enabled rich 
Internet applications, he added. 

Beyond the desktop, access to 
local hardware contributes to Sil- 
verlight s media experience. 

Silverlight applications can 
now access Webcams with 
client-side input access. Guthrie 
demonstrated an application 
that morphed his picture, which 
he then uploaded to his Twitter 
profile. 

Another application scanned 
continued on page 19 ► 



Social networking hits enterprises 

Salesforce Chatter tries for a Facebook-like feel 



BY ALEX HANDY 

Facebook has had an influence 
on Salesforce. Salesforce CEO 
Marc Benioff spoke at his com- 
pany's annual Dreamforce con- 
ference, where he introduced 
Salesforce Chatter, a social net- 
work built in the likeness of 
Facebook, but designed for 
enterprise use. 

While some enterprises have 



already woken up to the power of 
social networks using consumer- 
focused tools like Facebook, Ning 
or Twitter, Salesforce's Chatter is 
unusual in that it's an offering 
specifically designed to facilitate 
business communications. 

"Why do I know more about 
strangers on Facebook than my 
own employees?" asked Benioff. 
He then demonstrated Chatter's 



abilities, which appear similar to 
those found on Facebook and 
other social networking sites. 
Chatter allows employees to 
make profiles, update their sta- 
tus, join groups and build social 
applications. 

Benioff pointed out that many 
modern enterprise employees 
already live in the world of Face- 
continued on page 15 ► 




Salesforce Chatter, the company's 
enterpise social networking service, 
was unveiled at Dreamforce. 
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Apache moves forward with machine 

Mahout offers building blocks for intelligent apps atop 



BY ALEX HANDY 

When Bradford Cross and the 
FlightCaster team launched 
their startup earlier this year, 
they had already spent months 
building systems that could 
learn from the FAA and airline 
information. Elsewhere, Net- 
Flix paid an independent 
developer a million dollars to 
build a new recommendation 
engine for their movie rental 
system. Both of these systems 
were built on machine learn- 
ing, also known as artificial 
intelligence, but both of these 
learning machines were built 
from scratch. 

AI has been around since the 
early days of software develop- 
ment, but it is only recently that 
machine learning has begun to 
become a viable business tool. As 
such, a group of Apache Lucene 
developers decided earlier this 
year to build out the tools 
needed to create competent 
machine-learning systems on top 
of the big data systems being cre- 
ated at Apache. 



In mid-November, the 
Apache Mahout project 
reached version 0.2, and with it 
comes some of the first build- 
ing blocks for creating systems 
like the NetFlix recommenda- 
tion engine. While this is only 
the second release for the pro- 
ject, and even its creators say it 
is still in its infancy, Mahout is 
functional and can be put to 
use now. 

Mahout is an attempt to 
build libraries and algorithms 
useful to developers attempting 
to create machine-learning 
applications. It is typically used 
on top of Apache Hadoop, 
where large data sets can be 
stored and analyzed, and where 
the actual trained machine- 
learning routines can be execut- 
ed across that data. 

Grant Ingersoll is one of the 
cofounders of the Mahout pro- 
ject. He's also cofounder of 
Lucid Imagination, a company 
founded at the beginning of 
this year and dedicated to pro- 
viding commercial support and 



service to the Apache Lucene 
project. 

He said that Mahout "grew 
out of some frustrations all of us 
had had with various other 
machine-learning packages. 
There are others, and some of 
them are quite good, but we 
didn't feel they all address the 
issues important to us." 

Those important factors 
were the existence of a vibrant 
community, the scalability of 
the solution, and the licensing 
of the tools under a business- 
friendly license. 

ENTER MAHOUT 

Thus, Apache Mahout was cre- 
ated. "Our main algorithms are 
around clustering and catego- 
rization," said Ingersoll. "We 
also added in frequent pattern 
mining and a big chunk of code 
around collaborative filtering, 
what some people call recom- 
mendation systems. The fre- 
quent pattern mining is a vari- 
ation of association rules, such 
as the proverbial when some- 



'[Mahout] grew out 
of some frustrations 
all of us had had 
with various other 
machine-learning 
packages.' 

—Grant Ingersoll, cofounder 
of the Mahout project and 
Lucid Imagination 



one buys diapers they also buy 
beer' scenario." 

Mahout is still in its infancy, 
said Ingersoll, but he added 
that having the project run 
under the Apache flag means 
that work on Mahout will con- 
tinue, even if all of the current 
contributors decide to leave. 
That's been a problem for oth- 
er open-source machine- 
learning projects, said Inger- 
soll. Because those projects 
are typically funded by acade- 
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mia, their communities tend to 
vanish once funding for the 
project dries up. 

And just what is a Mahout? 
Ingersoll said that it is the 
Hindi word for the fellow who 
tends and rides a trained 
elephant. With the Apache 
Hadoop project serving as the 
most common platform for 
building with Mahout, it would 
seem that elephants are now 
the animal most commonly 
associated with big data. I 



Open Web Foundation delivers legal framework 

OWF agreement allows for sharing Web service specs 



THE FIRST SPECIFICATIONS 



MashSSL Open 1.2.0: Accord- 
ing to SafeMashups, this proto- 
col allows two Web services 
communicating through an 
HTTP User Agent to mutually 
authenticate and exchange a 
session key. (SafeMashups) 

Media RSS 1.5.0: Yahoo devel- 
oped an RSS module to supple- 
ment the <enclosure> element 
capabilities of RSS 2.0 to make 
media syndication more robust. 
(Yahoo) 

OAuth WRAP: The OAuth 
WRAP (Web Resource Autho- 
rization Protocol), which 
Microsoft developed for secure 
API authorization for desktop 
and Web applications. (Face- 
book, Google, Microsoft, Yahoo) 

OpenService Format Specifica- 
tion: According to Microsoft, 
Accelerators are a contextual 
service to access and retrieve 
service information from any 
Web page in Internet Explorer. 
This specification describes 
service providers. (Microsoft) 

PubSubHubbub: This is a pub- 



lish/subscribe protocol that 
Google developed as an 
extension to Atom and RSS. 
(Google) 

Salmon Protocol: Google 
describes this protocol as a "an 
open, simple, standards-based 
solution that lets aggregators 
and sources unify" conversa- 
tions about content. (Google) 

Simple Web Tokens: Access 
tokens that are used with 
OAuth WRAP to validate cre- 
dentials. (Facebook, Google, 
Microsoft, Yahoo) 

Web Slice Format Specification: 

This specification consists of 
HTML annotations to enable 
users to subscribe to portions of 
Web pages, known as Web 
Slices, in Internet Explorer 8. 
(Microsoft) 

XML Search Suggestions For- 
mat Specification: This specifi- 
cation enables search providers 
to send suggested searches to 
users of Internet Explorer 8. 
(Microsoft) 

—David Worthington 



BY DAVID WORTHINGTON 

The Open Web Foundation, a 
consortium of software compa- 
nies working on Web service 
technology specifications, has 
delivered a legal framework for 
the creation of new standards. 

The OWF Agreement is 
designed to facilitate the 
sharing of intellectual property 
by allowing organizations to 
implement a version of a spec- 
ification without fear of legal 
repercussions. 

Companies, including Face- 
book, Google, Microsoft and 
Yahoo, negotiated the frame- 
work. The open-source com- 
munity also participated, 
including open-source attorney 
Larry Rosen, said Microsoft 
senior attorney and OWF board 
member David Rudin. A full 
list of members can be found 
on the OWF Web page. 

Facebook, Google, Microsoft, 
SafeMashups and Yahoo have 
contributed specifications, 
including OAuth WRAP, Simple 
Web Tokens, OpenService For- 
mat Specification, Web Slice 



Format Specification and XML 
Search Suggestions Format 
Specification. 

Companies like Microsoft 
develop the specifications, but 
the premise of OWF is to pro- 
mote interoperability and stan- 
dards development, Rudin said. 
The OWF agreement allows 
developers to coalesce around a 
mutually decided-upon version 
of a specification so that the 
industry is "marching together," 
he explained. 

Efficiency was another 
objective. When different orga- 
nizations collaborate on specifi- 
cations, it can take three to five 
months to establish a consor- 
tium based on a custom agree- 
ment, Rudin said, "Using the 
OWF structure enables them to 
be nimble, faster and more effi- 
cient on the legal side." 

The OWF agreement also 
provides protections for the use 
of derivative works, Rudin 
added. If an implementing 
company is not satisfied with 
those protections, it may nego- 
tiate for a license, bilaterally 



and under non- discriminatory 
terms, he said. 

There are further protec- 
tions concerning multinational 
entities that cannot bind their 
agreements to a parent compa- 
ny, Rudin added. For example, 
NBC Universal cannot bind 
GE s nuclear reactor division to 
an agreement. "A lot of thought 
went into the agreement to pro- 
tect the community as much as 
possible," said Rudin. 

Additionally, OWF provides 
a structure and legal mecha- 
nism for specification develop- 
ment communities to get start- 
ed, Rudin said. "The lack of a 
legal mechanism was harming 
the ability to develop specifica- 
tions. 

"This is meant for communi- 
ties that are developing online 
without a governance model in 
place. It eases the processes of 
forming new foundations along 
the way," Rudin explained. He 
noted that the OpenID founda- 
tion required a year of legal 
negotiations to become estab- 
lished. I 
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Gartner suit dismissed 

Magic Quadrant case thrown out on First Amendment grounds 



BY ALEX HANDY 

It's not often that a lawsuit 
between businesses is thrown 
out on constitutional grounds, 
but that's what happened in the 
lawsuit between ZL Technolo- 
gies and analysis firm Gartner. 

Originally filed in March, the 
suit alleged that Gartner's Magic 
Quadrant reports were biased 
toward big companies, particu- 
larly those that had paid Gartner 
for large amounts of consulting 
fees. But in November, the 
judge in the case declared that 
the suit was not up to snuff. 

Gartner's lawyers filed for 
dismissal on First Amendment 
grounds, and the judge seemed 
to agree with that assessment of 
the case. However, when the 
judge announced his decision 
to dismiss the case, he did leave 
the door open for further litiga- 



tion when he told the lawyers 
for ZL Technologies that if they 
could rework their suit in 30 
days, he would reconsider it. 

ZL Technologies' CEO, Kon 
Leong, has already said that he 
would appeal any decision 
against him. While news of the 
dismissal disappointed Leong, 
he said that he was pleased with 
the opportunity to refile, and he 
said that he intended to do so 
within the 30-day limit. 

"While we are disappointed 
that the court has dismissed our 
lawsuit as filed, we are pleased 
that it has given us leave to 
amend our complaint, over Gart- 
ner opposition," said Leong. 

"We believe the market 
should take note that the 
defense on which Gartner pre- 
vailed was its argument that its 
reports contain 'pure opinions,' 



namely, opinions which are not 
based on objective facts. In ZLs 
view, that is directly contrary to 
the statements Gartner makes 
to its customers when selling its 
allegedly sound research. ZL 
intends to amend its complaint 
and refile within 30 days. 

"ZL believes that Gartner's 
overwhelming influence on 
large corporations' purchasing 
decisions, and its inaccurate 
ratings, including its bias in 
favor of large vendors, combine 
to pose major competitive hur- 
dles that hurt smaller innova- 
tive vendors across all technolo- 
gy sectors. The harm falls not 
only on new and innovative 
companies like ZL, but on the 
enterprise customers who 
receive faulty purchasing 
advice, and as a result over- 
spend on inferior technology." I 



Codice branches out with SCM tool 



BY JEFF FEINMAN 

Version control software and 
software configuration manage- 
ment (SCM) company Codice 
Software has revamped its ver- 
sion control system to better 
track and map development 
history. 

Plastic SCM 2.8, released in 
November, offers thousands of 
task-focused code branches that 
can be worked upon in separate 
locations, and then synchronized 
with the full codebase when the 
task is completed. Pablo Santos, 
CEO of Codice, said any combi- 
nation of branches can be 
merged for better developer 
productivity and speed. 



He said the entire code 
replication process has been 
improved in the new version of 
Plastic SCM. "Replications are 
faster now and consume less 
network bandwidth," he said. 

"We really tried to make the 
best use of network resources, 
so even if you're worlds apart, 
you can always rely on the way 
the data is changed." 

A new 3D version tree 
shows when project changes 
were made and provides infor- 
mation on source code develop- 
ment. Plastic SCM 2.8 now can 
work with 64-bit operating sys- 
tems, which Santos said is good 
for heavy loads and accesses 



more memory. 

Plastic SCM can operate 
across Linux, Mac OS X and 
Windows platforms, and it inte- 
grates with back-end databases, 
including Firebird, MySQL, 
Oracle, PostgreSQL and SQL 
Server. 

Codice, based in Spain, 
entered the U.S. market in 
March 2008 with Plastic SCM 
2.0, designed to help developers 
work on parallel tracks in the 
software development process 
without conflicting with one 
another's work. It competes with 
such tools as CVS, Microsoft 
Visual SourceSafe, Perforce and 
Subversion. I 
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Plastic SCM 2.8 allows developers to merge many branches to correlate different aspects of software configuration. 
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NEW PRODUCTS 



Intel has created the Parallel Universe Portal, a Web-based mul- 
ticore service that helps application developers analyze how their 
Windows-based software will run in multicore processor environ- 
ments. Parallel Universe Portal is a cloud-based service that tests 
parallel applications written for Windows on an on-demand basis. 
According to Intel executives, it is available to members of the 
Intel Software Network for free . . . Automated application intel- 
ligence company CAST Software has made available what it calls 
an application quality benchmarking repository. The Appmarq 
database focuses on helping organizations manage their applica- 
tion's software quality with statistics and trend data, according to 
CAST executives. Data is generated directly from source code 
using CAST'S quality measurement algorithms. 



UPDATES 

J L 



Debugging and analysis company TotalView Technologies has 
released a beta version of ReplayEngine 2.O. Company execu- 
tives said the new release will integrate with applications that 
use shared memory and memory linked to a device. A Backwards 
Continue feature lets users go directly from a crash site back 
to the point at which that crash originated, even if the program 
had been writing to an unrelated pointer in another thread. 
Additionally, ReplayEngine has new integrations with message 
passing interface (MPI) environments, including Open MPI, 
MPICH2, MVAPICH and Intel MPI . . . Adobe has released beta 
versions of Adobe AIR 2 and Flash Player 10.1. For the new 
version of AIR, Adobe has added the ability to work with mass 
storage devices and user datagram protocol networks. New 
features in Flash Player 10.1 include the ability to use H.264 
video on Windows PCs, netbooks and mobile devices. Both are 
available as free downloads and are expected to be generally 
available in mid-2010, according to the company . . . Load test- 
ing company Neotys can now load and stress test ICEfaces 
applications from ICEsoft Technologies. ICEfaces is an open- 
source AJAX framework for developing thin-client rich Internet 
applications. Neotys executives said ICEfaces is becoming popu- 
lar in the banking and insurance sectors, which are key markets 
for the company . . . Application automation company rPath has 
added dashboard reporting capabilities to its rPath release 
automation platform. rPath now gives information on system 
compliance, software distribution rates and patterns, and sys- 
tem updates, according to company executives. Also new in 
rPath are built-in dialogs on key tasks and API integration with 
business process managers . . . Software component vendor The 
Imaging Source has released version 15.1 of its TX Text Control 
word processing components, adding the ability to change colors 
of fonts and display elements. Users can also now programmat- 
ically change the insertion mode and positioning of inserted 
images and text frames, according to the company. Other new 
features in TX Text Control 15.1 are new image constructing 
objects and automatic maintenance of image formats with a new 
SaveSettings class. 



, PEOPLE , 



Nicholas M. Donofrio, a former executive vice president with 
IBM, has been named to chip maker AMD's board of directors. 
Donofrio, 64, spent 44 years at IBM before retiring in 2008. 
He began with IBM as a logic and memory chip designer, and 
has headed company divisions including the Unix server business 
and mainframe business at points during his tenure. He last 
held the position of executive vice president of innovation and 
technology, where he helped recruit new IBM employees out of 
universities. I 
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Parasoft virtualizes 
apps for testing 

SOAtest 6.2 uses emulation to bypass dependencies 

an online banking interface. 



BY JEFF FEINMAN 

Parasoft is, in a sense, stuffing applica- 
tions through the copy machine in a new 
version of its testing and analysis suite. 

Parasoft SOAtest 6.2, released in 
November, provides what the company 
calls application behavior virtualization, 
according to Rami Jaamour, Parasoft's 
SOA solutions product manager. In 
order to make application behavior easy 
to repeat, SOAtest automatically takes a 
snapshot of an application and collects 
the runtime environment data. Jaamour 
said SOAtest can create copies of both 
applications and back-end systems so a 
developer can reference such applica- 
tions or systems when developing soft- 
ware. 

Team members can then deploy and 
develop using emulated versions of their 
applications. Jaamour said this is impor- 
tant because, nowadays, there are often 
different systems that depend on each 
other, and a user might not have control 
over all those dependencies. 

In explaining application behavior 
virtualization, Jaamour brought up an 
example involving someone working on 



"You've got the Web app with differ- 
ent things for customers to do: transac- 
tions, deposits, checking their accounts, 
and so on," he explained. "And you are 
given the task of adding new capabilities 
to this online banking application, but it 
talks to another back-end system that 
actually maintains the account. 

"When you work on your piece of 
that banking application, you might not 
have access to that back end. With appli- 
cation behavior virtualization, you are 
able to emulate the behavior of this 
back-end system that has the account. 
Your online banking application can talk 
to the emulated version of the back end 
so that you can run your use case sce- 
narios and do your development work 
on it." 

Another new feature in Parasoft 
SOAtest 6.2 is that users can load test 
any component even if it was created on 
another testing framework such as 
JUnit. 

Jaamour said Parasoft SOAtest s new 
load testing capabilities also allow users 
to find concurrency issues in their appli- 




Parasoft SOAtest now lets users load test any component regardless of what testing frame- 
work it was created on. 



cations. For instance, if someone writes 
a JUnit test case for classes in his or her 
Java code, SOAtest can simulate threads 
accessing the code simultaneously to 
expose issues. 

"Today's applications are more and 
more multi-threaded and concurrent, 
and it is quite challenging for develop- 
ers to ensure that their code can func- 
tion reliably under concurrency," 
Jaamour said. "So we provide the abili- 
ty for you to test the concurrency out of 



any pieces of your Java code to ensure 
it will be reliable." 

Parasoft SOAtest now has tighter 
integration with IBM WebSphere and 
can integrate with RFH2 headers, which 
are used for exchanging messages over 
the application server. Jaamour said this 
feature is part of Parasoft's strategy to 
integrate with specific platforms such as 
WebSphere, rather than just standard 
APIs and protocols such as HTTP and 
XML. I 
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Details emerge as Windows Azure comes together 



BY DAVID WORTHINGTON 

LOS ANGELES — Ray Ozzie, 
Microsoft's chief software archi- 
tect, took the keynote stage at 
Microsoft's Professional Devel- 
opers Conference to announce 
that Windows Azure will go into 
production on Jan. 1, 2010. 
Meanwhile, Microsoft will add 
new features, and select partners 
will soon start hosting commer- 
cial applications on Azure. 

Ozzie announced several 
Azure services: an abstraction 
layer for the cloud called "App- 
Fabric," and a data catalog 
called "Dallas." Azure will be 
available both as a development 
platform and at an infrastruc- 
ture-as-a-service level. 

Microsoft's main focus was its 
platform, which is designed to 
help developers port their .NET 
applications to the cloud. For 
that, it is delivering AppFabric, 
which combines Microsoft's 



Windows Server for composite 
applications with Microsoft's 
Velocity caching technology. 

AppFabric provides caching 
and elasticity to give applications 
higher availability with lower 
latency, and it reads and writes 
application state, explained 
Abhay Parasnis, general manag- 
er of Microsoft's application 
server group, in a follow-up 
interview. 

Parasnis added that App- 
Fabric is critical plumbing for 
Azure, and he said that it brings 
the concepts of elasticity and 
scale to developers without 
requiring them to become 
"rocket scientists." 

"Developers change configu- 
ration data without changing 
application code," said Burley 
Kawasaki, director of developer 
platform product management 
at Microsoft. "It opens up use 
and consumption more broadly 



than historical application devel- 
opment with specialized skills." 

The final version of AppFab- 
ric will be released next year. 

AppFabric does not entirely 
negate the need to understand 
the cloud-programming model. 
Microsoft's Server and Tools 
business president Bob Muglia 
described how the company 
was going to help developers 
structure applications for 
Azure, and to make applications 
portable to migrate from Win- 
dows data center to the cloud. 
"Developers have to evolve 
applications to take advantage 
of the cloud," he said. 

Building hybrid cloud appli- 
cations is another focus of 
Microsoft's cloud application 
model. To that end, Microsoft is 
working on "Sydney," a project 
to connect private data centers 
with Azure. 

Sydney is focused on enabling 



secure, federated connectivity 
between on-premises and cloud 
environments with identity man- 
agement and security policies, 
said Prashant Ketkar, director of 
product marketing for Windows 
Azure, in a follow-up interview. 
"It is as close to the network lay- 
er as possible." 

Meanwhile, the Dallas data 
service component enables 
developers to create data ser- 
vices. Dallas, which is built on 
Windows Azure and SQL 
Azure, allows developers to 
access commercial and private 
data sets across platforms. 
Ozzie called Dallas a "game- 
changing subsystem." 

There is no limit on the size 
of the data set, said Ketkar. 
He added that Microsoft has 
discount waterfalls built into 
the Azure (both SQL and 
Windows) consumption model 
for customers with large vol- 



umes of data. 

Dallas is seeded with trial 
data sets from media compa- 
nies, the U.S. government and 
others. Data can be bound to 
applications via ATOM feeds 
and REST, said Microsoft tech- 
nical fellow David Campbell. 

Microsoft is also hosting a 
catalog of business applications 
and services called "Pinpoint," 
which targets developers. Pin- 
point is integrated into the 
Azure development portal. 
Beyond the platform level, 
Microsoft has opened up Azure 
to a hosting role. 

Matt Mullenweg, founder of 
WordPress developer Automat- 
tic, joined Ozzie on stage to 
announce that WordPress has 
migrated to Azure at an infra- 
structure-as-a-service level. Pop- 
ular blogs, such as "I Can Has 
Cheezburger?" and "FAIL Blog," 
now run on Azure. I 



Partners put development tools on display 



BY DAVID WORTHINGTON 

Microsoft's development plat- 
form announcements grabbed 
the headlines at PDC, but as 
usual, its partners injected their 
own innovations into 
the new technology. Iqm 
Here are some of the 



templates, according to manag- 
ing director Gustavo Eydel- 
steyn. ComponentOne also 
introduced a new client-side 
PDF control for reporting and 
printing, as well as 
I eight Windows Presen- 
tation Foundation 



highlights from the show floor: 
ComponentOne intro- 
duced Studio Enterprise 2009 
v3. The release features a new 
Silverlight theme manager 
called ClearStyle that allows 
developers to make changes to 
controls without having to create 



(WPF) controls, which were 
ported from Silverlight. 

Dundas showed off a new 
visualization data suite called 
Dundas Dashboard. Dundas 
Dashboard is designed for busi- 
ness intelligence software, and 
includes collaborative designers 
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Telerik Just Code aids Visual Studio developers with code navigation, 
quick fixes and refactoring. 



and wizards for creating visual- 
izations. It includes Silverlight 
3 controls for animation and 
interaction. 

Gizmox, makers of Visual 
WebGui, announced that its 
application platform will run 
atop Windows Azure to migrate 
.NET desktop applications to 
the cloud. The process does not 
require a rewrite; instead, 
developers copy and paste Win- 
dows code into Visual WebGui, 
then select Windows Azure for 
runtime, according to the com- 
pany. 

Infragistics had a Microsoft 
Surface tabletop computer on 
the show floor to demonstrate 
its latest WPF controls. The 
controls work with Windows 7 
touch-screen computers, or 
developers can download them 
for use with Microsoft's Surface 
SDK, said Andrew Flick, prod- 
uct manager for Win Client. 

InnerWorkings intro- 
duced its CodeBox source 
code collaboration tool. Code- 
Box allows developers to add 
comments, ratings and inline 
annotations to code without 
modifying it, said vice presi- 
dent of marketing Brian 
Finnerty. Developers can also 
search on metadata and pro- 
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ComponentOne's ClearStyle technology allows developers to make finite 
styling changes to Silverlight controls. 



duce reports through a Web 
service. 

Micro Focus demonstrated 
DevPartner Studio Professional 
Edition 9.1, which became 
available in October. It intro- 
duced support for Windows 7. 

PreEmptive Solutions 
president Gabriel Torok said that 
the company aimed to "lower 
the cost of knowing" operational 
intelligence by providing devel- 
opers with their own Customer 
Experience Improvement Pro- 
gram (CEIP), similar to what 
Microsoft and other big vendors 
use to improve their software. 
CEIP injects technology that 
monitors Java and .NET into 
applications to collect feedback 
on user experiences. 

Telerik introduced a Visual 
Studio productivity add-on 



called Just Code. Just Code 
assists developers with code 
navigation, quick fixes and 
refactoring, and it includes 
template support. The compa- 
ny extended those capabilities 
to JavaScript, which "many 
tools do not do all that well," 
said chief evangelist Todd 
Anglin. Just Code works in a 
separate process outside of 
Visual Studio, he said. 

Xceed introduced a Sil- 
verlight 3 grid control that is 
designed to offer a fluid user 
interface experience, said Odi 
Kosmatos, vice president of 
R&D. The control works in the 
background to fetch pages in 
advance, so users always have 
instant feedback, he explained. 
"Other grids freeze the UI until 
the data comes to the users." I 
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Ozzie, Muglia and the Microsoft cloud 

Education will spearhead effort to spread technology adoption 



BY DAVID WORTHINGTON 

LOS ANGELES — Porting an 
on-premise application to the 
cloud is not as easy as flipping a 
switch, according to Microsoft's 
Bob Muglia. But the company 
will work with developers to 
help them adopt successful 
cloud development patterns. 

SD Times sat down with 
Muglia, vice president of 
Microsoft's Server and Tools 
Business unit, and Ray Ozzie, 
Microsoft's chief software archi- 
tect, at the Microsoft Profession- 
al Developers Conference to dis- 
cuss a number of topics. 

When asked how Microsoft 
would help its customers under- 
stand how to comply with regu- 
lations and data privacy laws that 
could prohibit moving data to 
the cloud, Ozzie said that 
Microsoft has experience in 
countries around the world, and 
that it could parley those experi- 
ences to guide its customers. 

Microsoft had to modify 
Windows Messenger features 
in different countries at the 
behest of regulators, but it still 



managed to ship its software, 
Muglia added. 

Additionally, Microsoft has 
data centers throughout the 
world to give customers in coun- 
tries with restrictive regulations 
the ability to use Windows Azure 
in their countries, Muglia said. 

Ozzie said that he expected 
that laws will become easier over 
time, because governments have 
an interest in using cloud com- 
puting. Encryption is a model of 
how laws were adapted to chang- 
ing technology, he added. "It's as 
if they don't know that encryp- 
tion exists," he quipped. 

When asked about how 
Azure fits into development and 
testing, Muglia confirmed that 
Microsoft intends to integrate 
Azure into Visual Studio for pro- 
visioning test environments. 

Microsoft will provide pre- 
configured virtual machines for 
Windows and .NET; more cus- 
tomization (such as changing 
system configurations) will be 
added over time, he said. 

That integration could repre- 
sent another step up in the level 




Ray Ozzie says that Microsoft's resources and experience around the 
world would help customers comply with local data privacy laws. 



of "coopetition" with Hewlett- 
Packard, said Forrester principal 
analyst Jeffrey Hammond. 

Lastly, Muglia and Ozzie 
were insistent that Silverlight 
was part of the open Web. They 
pointed to Mono Moonlight as 
an example, and they noted that 
Microsoft has licensed associat- 
ed intellectual property, includ- 
ing Windows Media codecs, to 
open-source developers. 

Mono project lead Miguel de 



Icaza said that he wanted 
Microsoft to go a step further by 
contributing technology to 
EC MA International. Muglia 
responded, saying that Microsoft 
was trying to balance standards 
with its ability to rapidly innovate 
the Silverlight platform. 

Ozzie also gave an explana- 
tion about how Silverlight is 
meant to help developers lever- 
age existing application and tool 
investments on the Web, and it 



was complementary to (not 
meant to suppress) HTML 5. 
The draft specification of HTML 
5 includes a framework for 
building Web applications. 

In a follow-up conversation 
regarding the cloud, Jamin 
Spitzer, director of platform 
strategy for Microsoft, said that 
"Developers need to have a real- 
istic sense of what changes and 
what stays the same by moving 
to an instance-based IaaS 
cloud." Microsoft announced an 
IaaS (Infrastructure-as-a-Ser- 
vice) offering for Azure at PDC. 

The "true promise" of cloud 
computing, he added, is fully 
realized through transforming 
applications for the cloud. He 
said that developers need to 
identify the core set of function- 
al capabilities required for spe- 
cific application scenarios, then 
pick the right deployment loca- 
tion to satisfy those capabilities. 
Some workloads should stay on 
premises if going to the cloud 
does not justify future cost sav- 
ings, or if data should remain 
behind the firewall, he said. I 



Microsoft unveils supplemental software 

New releases for interoperability, identity management, SharePoint 



BY DAVID WORTHINGTON 

LOS ANGELES — Silverlight 
and Windows Azure headlined 
Microsoft's Professional Devel- 
opers Conference, but Microsoft 
also made a number of signifi- 
cant announcements concerning 
interoperability, identity man- 
agement, Surface touch technol- 
ogy, and SharePoint. 

Microsoft delivered a Java 
SDK for Windows Azure stor- 
age, with additional tools and 
guidance for deploying the Tom- 
cat application server in Azure. 
Microsoft has enabled external 
endpoints to allow applications 
that are not running on Internet 
Information Services to receive 
traffic, said open-source commu- 
nity manager Peter Galli. 

Microsoft will also allow 
Azure to be used as "infrastruc- 
ture as a service" with Windows 
Server Virtual Machine sup- 
port. SugarCRM, an open- 
source customer relationship 



management software maker, 
announced that it would offer 
its applications on Azure. 

Azure is designed to be open 
and interoperable from its basic 
protocols, said Jean Paoli, gen- 
eral manager of interoperability 
strategy at Microsoft. When 
asked about portability, he said 
that Microsoft was participating 
in the Distributed Management 
Task Force's cloud computing 
standards efforts, and it was 
"trying to make sense" of cloud 
scenarios. The Distributed 
Management Task Force is a 
standards body. 

Microsoft also announced an 
identity management solution 
that works in the cloud as well 
as on premises. 

Stuart Kwan, group program 
manager for Microsoft's Feder- 
ated Identity team, unveiled the 
final version of Windows Identi- 
ty Foundation, a product for 
identity and access management 



for .NET applications. The tech- 
nology is a core element of 
Microsoft's "Geneva" platform, 
and it is designed to interact with 
outside identity systems, he said. 

Geneva enables identities to 
be federated to new services in 
the cloud and in a service-ori- 
ented architecture. 

Identity Foundation is 
designed to help developers 
write identity into an application 
without being identity experts, 
Kwan said. "Developers only 
think about claims and do not 
need to be concerned about how 
they get them, as long as they 
trust who they get them from." 

On the desktop, Microsoft's 
development efforts are focusing 
on touch-screen user interfaces. 
The company gave PDC atten- 
dees touch-screen-enabled lap- 
tops. Its Surface team developed 
that touch-screen technology. 

The Surface team also deliv- 
ered a public SDK and technical 



documentation to the Microsoft 
Developer Network. The docu- 
mentation focuses on how devel- 
opers can design applications 
with the multi-touch interaction 
paradigm, said Brad Carpenter, 
general manager of software and 
user experience for Surface. 

Surface development part- 
ners have grown from 60 last 
year to 250 today, Carpenter 
said. Technology from Surface is 
used in Windows 7, and the team 
produces Windows Presentation 
Foundation controls that OEMs 
can install on PCs, he added. 

The company is also investing 
in broadening development tools 
for Office SharePoint Server. 

Microsoft announced beta 
releases of Office 2010 for pub- 
lic download. It is also offering 
Web editions of Office applica- 
tions, also in beta. 

Developers can integrate 
social networking into Office 
Outlook 2010 with an SDK to 



connect with Linkedln and oth- 
er networks. There is also out- 
of-the-box integration with 
Windows Live and SharePoint. 

What's more, Microsoft 
delivered new tooling for Share- 
Point 2010, as well as Business 
Connectivity Services, a set of 
features to connect SharePoint 
to Web services. 

"Developers can write code 
and deploy on premises, but also 
put partially trusted code into 
SharePoint online," said Share- 
Point director Arpan Shah. He 
explained that applications can- 
not access resources outside of 
the site container, and Microsoft 
provides governance over appli- 
cation resources. 

A new version of Microsoft's 
"Duet" SAP integration soft- 
ware was re-architected to uti- 
lize Business Connectivity Ser- 
vices, Shah said. 

He said that Microsoft has 
more than 4,000 SharePoint 
development partners, and he 
expects that number to double 
with the next release. 

Office 2010 will ship in the 
first half of 2010, according to 
the company. I 
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IBM: Cut maintenance costs with mainframe development 



BY JEFF FEINMAN 

IBM is promoting mainframe 
development as a way to reduce 
IT maintenance costs. The com- 
pany in November released 
Rational Developer for System z 



(RDz) version 7.6, which will 
look to attract new developers to 
mainframe development. 

Scott Searle, a marketing 
program director with IBM 
Rational, said the software 



offers a "really compelling eco- costs by about 10%. 



nomic argument" for doing 
more development for the 
mainframe. He said that such 
development could cut a com- 
pany's application maintenance 



"Many mainframe cus- 
tomers today really have shack- 
les on their IT budget because 
80 to 90% of it can be focused 
on maintenance," Searle said. 
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TECHNOLOGIES. 



"If we can help them cut that 
[cost], the resulting increase to 
their ability to extend applica- 
tions for developing new capa- 
bilities is almost doubled." 

IBM is also promoting 
green-screen development 
among younger developers. 
Searle claimed that once Java 
developers begin working with 
RDz, they will see that they 
can work on mainframe soft- 
ware just as easily as they build 
Java applications. He added 
that RDz can work with the 
Jazz-based Rational Team 
Concert for System z to sup- 
port agile methodologies. It 
also works with IBM's change 
and configuration manage- 
ment software. 

"RDz allows you to inte- 
grate teams between distrib- 
uted and mainframe, and so 
the teams will work on an 
application, and everyone sees 
the changes in real time," Sear- 
le said. "They can track and 
govern the project through a 
single interface." 

Separately, IBM added a 
common repository to version 
2.0 of Rational Team Concert 
for System z. According to 
Searle, the new repository is 
more consolidated regardless of 
the platform being developed 
on, bringing increased collabo- 
ration and information avail- 
ability to distributed teams. 

Rational Team Concert now 
can interface with COBOL, and 
has much better project pre- 
dictability with new planning 
and risk assessment dash- 
boards, Searle added. Teams 
can put policies into place for 
working on tiered applications 
with the new dashboards. 

Searle said that IBM plans 
to invest in Rational Team 
Concert, with a goal of making 
it as functional and compre- 
hensive as the Rational 
ClearCase software configura- 
tion manager. 

"ClearCase does a pretty 
good job at governance and life- 
cycle management, but Ratio- 
nal Team Concert is really the 
big new step forward," he said. 
"Rational Team Concert has 
great capabilities around man- 
agement and process to ensure 
that the management team is 
comfortable with the pace of a 
development project, to make 
sure that all checkpoints are 
met on time and projects are 
under control." I 
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CA builds agile project manager with help from Fbrce.com 



BY JEFF FEINMAN 

CA is currently building an agile 
development project manager 
aimed at helping small business- 
es and developers improve their 
processes with virtual require- 
ment and task management. 

Agile Planner leverages capa- 
bilities from Salesforce. corn's 
Force.com cloud-computing 
platform. David Hurwitz, CAs 
vice president of governance 
product marketing, said Agile 
Planner will commercialize 
Force.com s agile development 
and management capabilities, 
and add features of its own over 
the next few months with the 
help of developer feedback. He 
said Agile Planner will consist of 
a virtual requirements wall 
where differently colored notes 



can be placed and moved as 
requirements change and others 
gain a higher priority. 

Agile Planner users will also 
plan tasks — also known as 
sprints — by assigning require- 
ments to sprint charts. Users 
can leverage the application by 
simultaneously managing mul- 
tiple development techniques 
such as Extreme Programming 
and Scrum. 

"It will allow them to track 
function points and velocity, 
and then as they move through 
a sprint, it shows the planned 
and actual progress of the pro- 
ject in a burndown chart," Hur- 
witz explained. 

To generate attention for the 
release and to gather developer 
feedback, CA has created the 



Agile Planner Community, a 
forum where developers can 
submit and vote on ideas for 
feature enhancements. The site 
contains blogs, Webcasts and 
white papers on agile develop- 
ment. 

"As part of piecing it up, 
we've created a community of 
agile software developers," 
Hurwitz said. "In the spirit of 
agile, what we're doing is hav- 
ing developers submit ideas for 
what they'd like to see in an 
agile planning tool and vote on 
those ideas." 

Agile Planner will be inte- 
grated with CA Clarity PPM, the 
company's project and portfolio 
management system for manag- 
ing development initiatives. 
With the integration of Agile 






CA's David Hurwitz says that Agile 
Planner is aimed at small business. 

Planner and Clarity PPM, CA 
said users have management 
control of their projects regard- 
less of whether they use agile 
development or not. While it is 
being created, Agile Planner will 
also utilize features from CA 



Federation Manager, which pro- 
vides single sign-on and central- 
ized security management, and 
CA Wily for application moni- 
toring capability. 

Hurwitz said Agile Planner 
was derived from an existing 
application within Sales- 
force. com called ScrumForce, 
which manages agile develop- 
ment on Salesforce.com with 
product and sprint backlogs, as 
well as sprint timetables. CA 
will be taking those manage- 
ment capabilities and "beefing 
them up" over the next few 
months, according to Hurwitz. 

Agile Planner is currently 
under development, and Hur- 
witz said CA expects it to be 
generally available in the spring 
of 2010. I 



Social networks hit enterprise 



< continued from page 1 

book and Twitter, and thus, he 
said, it was logical to present 
enterprise applications in these 
familiar contexts. 

The Chatter social network 
builds on the Salesforce platform 
by enabling existing applications 
to be connected into the new 
social dynamics. Chatter 
includes APIs for pushing and 
pulling data from the system's 
databases, and the company is 
also showing off tools for integra- 
tion Chatter with Facebook, 
Google App Engine and Twitter. 

Those integrations can be 
sued to scour Twitter for tweets 
made about a company's prod- 
ucts, for example. Chatter can 
also pull in RSS feeds, and 
groups of employees can be fed 
information from these feeds. 
Additionally, existing Salesforce 
applications can be associated 
with Chatter profiles to allow 
employees to be associated with 
the tools they most often use. 

LOTS OF CLOUDS 

Benioff also introduced Service 
Cloud 2, a new set of capabili- 
ties for the Salesforce cus- 
tomer-service platform. Com- 
panies seeking to support their 
customers over the phone can 
now store their own knowledge 
bases within the Salesforce 
cloud. Integrations with Google 
and Twitter allow let those ser- 
vice workers to track down 
external support information 
online from within the Sales- 
force portal. 




Salesforce CEO Marc Benioff also showed off Service Cloud 2, which can 
integrate with external websites to track down support information. 



Benioff described his diffi- 
culties in pairing his Bluetooth 
headset with his BlackBerry 
smartphone. Benioff said he 
turned to Google for help 
rather than calling BlackBerry. 
He said his answer was found in 
an online tutorial video made 
by other BlackBerry owners. 
That's the type of knowledge 
that Service Cloud 2 hopes to 
tap, he said. 

Salesforce's other clouds, as 
Benioff referred to them, are its 
Sales Cloud and Custom Cloud. 
The Sales Cloud was also given 
the designation of Sales Cloud 
2 to denote new features for 
salespeople, as well as new 
APIs, connectors for Chatter, 
and more integrations of social 
networking sites like Facebook 
and Twitter. 

The Custom Cloud 2, which 



consists of the portions of Sales- 
force's SaaS offerings that are 
programmable by the user, was 
also updated. These sites are 
hosted on Force.com and are 
built with the company's own 
Apex programming language. 

At Dreamforce, the normally 
subscription- driven Force.com 
was supplemented by a new free 
service offering. Developers 
interested in building applica- 
tions within the Force.com cloud 
can now do so for free, provided 
they have less than 100 users and 
250,000 views a month. 

The Custom Cloud 2 update 
added new features to that 
hosting service. Salesforce.com 
now offers a load-balancing API 
for spreading work across mul- 
tiple instances of an applica- 
tion. The system can also now 
run scheduled processes. I 



API devs ready 
for Web app rise 



< continued from page 1 

mid '90s. It took a while," 
Musser said. 

He added that with the rise 
of hosted environments and 
cloud computing, it is wise for 
organizations to open their own 
APIs gradually, bringing out 
pieces of functionality one by 
one so the organizations feel 
secure in the content being 
revealed. For instance, a com- 
pany can initially open up a 
read-only function, then grow 
from there. 

APIs IN THE MARKETPLACE 

Web APIs are not only gaining 
steam among developers, but 
even some e-commerce sites are 
developing out their Web APIs 
in order to increase business 
transactions. Chad Dickerson, 
CTO of online handmade-item 
marketplace Etsy, said his com- 
pany has plans to deliver a read- 
and-write API, noting that e- 
commerce transactions and 
trades among users requires a 
writing capability. The company 
will also look to allow access to 
provide with permission of users. 
"This will enable the creation 
of financial apps, business man- 
agement apps and all sorts of 
things," Dickerson said. "APIs 
can also help companies be more 
social, so we're looking at ways to 
have the API open up communi- 
cation among our users." 



Allon Gladstone, a senior 
manager at communications 
company Alcatel-Lucent, also 
stressed the importance of com- 
munication between providers 
and users. 

"There's a very large market 
you can target as an app provider 
if you are able to talk to all carri- 
ers," Gladstone said. "World- 
wide, we have 4.5 billion sub- 
scribers, so we have billions of 
people that could potentially use 
your application if the provider 
has an API they could expose. 
The opportunity is huge here." 

Gladstone explained that 
Alcatel-Lucent offers infra- 
structure to enable carriers to 
offer their services to users, as 
well as open API service. The 
open API aggregation service 
talks to multiple carriers and 
provides a common set of APIs 
for different capabilities, such 
as user profile creation and 
messaging. 

No matter how or where an 
API is being used, there's a good 
chance that developers and 
organizations can always 
improve upon it, Dickerson said. 

"A good API is never fin- 
ished," he added. "In the same 
way that you launch a website 
and are always adding to it, I 
think the same thing is true for 
APIs. If you're starting an API, 
you can't just leave it. It needs to 
grow as your business grows." I 
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Embarcadero taps 
into SQL Azure beta 



BY ALEX HANDY 

Microsoft's cloud-enabled database plat- 
form, codenamed SQL Azure, isn't yet 
ready for prime time. But that hasn't 
stopped developers and database admin- 
istrators from signing on to try it out. 

To enable developers and administra- 
tors to better experiment with the SQL 
Azure beta, Embarcadero Technologies 
has partnered with Microsoft to release a 
free version of DB Artisan specifically tai- 
lored to help with the move to Azure. 

SQL Azure is based upon some SQL 
Server technologies, but it is being spe- 
cially crafted for the cloud. Scott Walz, 
senior director of product management 
at Embarcadero, said that both develop- 
ers and Microsoft have questions about 
how a cloud-based database should work. 

As such, DB Artisan 8.7.2 does not 
have optimization features, nor does it 
offer deep monitoring capabilities, 
because even Microsoft hasn't figured out 
how to give that type of information or 
power to users, said Walz. 

DB Artisan focuses on migration and 
query tools. Because this is a limited 90- 
day trial, it is also only able to migrate 
Microsoft SQL Server databases to Win- 
dows Azure. Walz said that the commer- 
cial version of DBArtisan for SQL Azure 
will include migration tools for many dif- 



ferent types of databases. 

A big reason for this release, said Walz, 
is to help SQL Azure developers and 
Embarcadero figure out SQL Azure. 
Because Microsoft has not exposed all the 
traditional metrics and information from a 
hosted database, SQL Azure and DBArti- 
san's support for it are incomplete. 

One of the questions remaining is how 
SQL Azure will present its process-moni- 
toring information. Walz said that clouds 
are inherently multi-tenant systems, so 
looking up a system process table in SQL 
Server isn't to be done lightly. 

Optimization is another area where 
SQL Azure is still coalescing, said Walz. 
When a developer sends a query into a 
cloud-based database, the developer 
asks, "How long does one wait before 
timing out the request?" Because SQL 
Azure is accessed via the Internet, five- 
minute queries could be normal, where- 
as on an internally hosted database, a 
five-minute query might be considered 
slow, Walz said. 

He said that one of the benefits com- 
panies are looking for is the consolida- 
tion of databases that may be replicated 
around the world. The vision is to have a 
single cloud that can take care of region- 
al host replication automatically, reduc- 
ing costs. I 



Clouds generate greater 
interest in data compression 



BY ALEX HANDY 

Clouds don't always bring rain, but one 
company is hoping to compress the rain 
of data when it happens. RainStor 
released version 3.5 of its database 
archiving system this month. 

John Bantleman, CEO of RainStor, 
said that version 3.5 marks his company's 
new push into enterprise IT. RainStor 
has also just opened its first North 
American offices to coincide with this 
release. The new push for cloud adop- 
tion, he said, is giving database compres- 
sion a useful new application online. 

Bantleman said that a major use 
case for RainStor is to help crunch 
down legacy applications built on data- 
bases so that they can be moved to 
smaller machines. With the compres- 
sion rates available from RainStor, a 
major but aging system can be moved 
to a virtualized machine while cutting 
the costs for storage associated with 
that machine. 

Ramon Chen, vice president of prod- 
uct management at RainStor, said that 
RainStor 3.5 is cloud agnostic, and it can 



save users some of their costs when deal- 
ing with pay-per-gigabyte storage sys- 
tems. Chen claimed compression could 
yield a 40% to 60% space savings on data 
stored in the RainStor system. 

"We accept the data in a very simple 
comma-delineated format," said Chen 
when describing how to export informa- 
tion into RainStor systems. "We make it 
smaller while still making it query- able. 
We de-dupe the data." 

That does come with a caveat, how- 
ever: "We only allow complex SQL 
queries or business objects to run direct- 
ly against data. We have no ability to run 
stored procedures," said Chen. 

RainStor is available in Amazon's S3 
and EC2 cloud computing services, and 
Chen said that future offerings from 
EMC may also include the system. For 
now, however, RainStor is focused on 
working with OEM partners, such as 
Informatica. RainStor is available in an 
embedded form from those partners. 

Bantleman said using RainStor on a 
database of around 100TB would cost 
around US$100,000. I 
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SOA Software gets into cloud service governance 



BY DAVID WORTHINGTON 

SOA Software has announced a 
cloud service governance initia- 
tive that will unfold throughout 
2010 with a suite of new prod- 
ucts released under a brand 
called "Atmosphere." 

Broker, the first commer- 
cially available Atmosphere 
product, will provide service 
governance capabilities, includ- 
ing management, measure- 
ment, monitoring, provisioning, 
policy-based validation, and 



reporting for cloud services, 
according to the company A 
service registry is built-in. 

The product will ship in the 
first quarter of the year, and pric- 
ing will start at US$50,000. It can 
be deployed as a virtual appli- 
ance in the customers data cen- 
ter or installed in a public cloud, 
said CTO Alistair Farquharson. 

"Governing the interactions 
between consumers and service 
providers will be a mandate for 
any company using software-as- 



a-service or other cloud services 
and offerings. Even when the 
need for trust is minimal, formal- 
ly acknowledging that level of 
trust should be a mandate," said 
Daryl Plummer, managing vice 
president and fellow at Gartner. 

Other Atmosphere prod- 
ucts will focus on planning, 
development and operations 
management. 

The Atmosphere planning 
products will focus on modeling 
services with the platforms that 



they run on, such as the cloud, 
Farquharson said. "The key 
thing that CIOs and enterprise 
architects are dealing with is 
parallel initiatives: SOA and 
cloud. We are trying to figure 
out how to leverage those 
opportunities against each oth- 
er," he explained. 

The development products 
will help organizations align the 
planning of services with the 
planning of the platform, Far- 
quharson said. "We will coordi- 



FORTIFY MIXES STATIC AND DYNAMIC ANALYSIS 



BY JEFF FEINMAN 

Fortify Software has created a 
software-as-a-service security 
platform that integrates the 
company's static analysis tech- 
nology with WhiteHat Securi- 
ty's dynamic testing. 

Fortify on Demand lets 
developers upload applications 
or URLs to websites for scan- 
ning. It leverages WhiteHat's 
dynamic testing capabilities on 
the back end, and users can do 
static and dynamic analysis. Tay- 
lor McKinley, product marketing 



manager with Fortify, said Forti- 
fy then provides scan results 
after a few days. 

"You can give us a URL and 
any credentials needed to access 
that site, and you can give us 
time slots for when to scan the 
site," McKinley said. "So we pass 
that information along to White- 
Hat, they conduct all the tests, 
and they supply us with the data 
back. We do the correlation and 
integration of all the static data 
and dynamic data and present it 
in one interface." 



McKinley explained that 
there are frequently correla- 
tions among static and dynamic 
test results. 

"So we can say, for example, 
'We saw a cross-site scripting 
vulnerability on this URL, and 
when we did the source code 
review, we also saw a cross-site 
scripting vulnerability. We think 
these may be the same thing,' " 
he said. 

Fortify on Demand inte- 
grates source and binary code 
analysis with Web application 



scanning, focusing on approxi- 
mately 90 application vulnera- 
bilities. 

McKinley said that Fortify on 
Demand is well-suited for those 
new to application security, as 
there are no deployment costs 
and it doesn't require security 
expertise. He claimed that scan 
results are easy to comprehend 
because Fortify prioritizes scan- 
ning results. 

Pricing for Fortify on 
Demand was not released as of 
presstime. I 



nate the process of developing a 
service along with a correspond- 
ing platform. It could be a new 
platform or the process of firing 
up new instance of a platform." 

Another objective is to help 
developers understand depen- 
dencies between business 
processes, services and cloud 
service platforms, according to 
the company. 

Lastly, an operational gover- 
nance component is designed to 
control the "spin up and spin 
down" of services based upon 
performance, Farquharson said. 
Developers will set service level 
agreements (SLAs) on services, 
and when the service falls short 
of meeting those SLAs, the soft- 
ware will "fire up" virtual infra- 
structure, he explained. 

The software will integrate 
with cloud services such as Ama- 
zon's Elastic Compute Cloud 
and RightScale's Cloud Com- 
puting Management Platform, 
Farquharson added. 

"We are at the cozy inter- 
section of SLAs and cloud 
computing. We are not getting 
into cloud computing busi- 
ness," he said. I 
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Silverlight opens door to COM, Windows 



< continued from page 1 

a barcode and invoked a Web 
service to compare product 
prices at online retailers. 

Microsoft has also added 
smooth streaming for video 
playback. The bitrate is auto- 
matically adjusted as processor 
and network conditions change, 
Guthrie explained. He also pre- 
viewed video streaming to an 
iPhone. 

SILVERLIGHT FOR BUSINESS 

There's also an assortment of 
new controls and capabilities 
for business users. Silverlight 
applications can now print, as 
well as read from the clipboard; 
the platform now also supports 
drag-and-drop and accepts 
mouse-wheel input. 

Another highlight was an 
embedded HTML hosting con- 
trol. Guthrie demonstrated 
Flash video being played within 
a Silverlight application. 

At the lower level, Silverlight 
4 includes UDP multicast for 
peer-to-peer scenarios, REST 
enhancements via ADO.NET 
data services, and Windows 
Communication Foundation 



RIA services that enable access 
to data for queries, changes and 
custom operations. 

Microsoft also tweaked Sil- 
verlight's performance by 
adding JIT optimizations in the 
Common Language Runtime 
compiler for Silverlight, Guthrie 
said. "It's almost twice as fast for 
processor-intensive things." 

Assemblies are shared 
between .NET 4 and Sil- 
verlight 4, and Microsoft will 
ship a WYSIWYG design sur- 
face with Visual Studio 2010. 



Microsoft is also adding code 
completion for data binding 
expressions. 

Beta 1 of Silverlight 4 is 
currently available for down- 
load, and a new plug-in has 
been developed for Google's 
Chrome browser. Silverlight 4 
is expected to be finished in 
the first half of 2010, Guthrie 
said. 

The Mac OS edition of 
Silverlight 4 has all the same 
features of its Windows coun- 
terpart except for COM inte- 



gration, said Brian Goldfarb, 
director of developer and user 
experience platforms at Micro- 
soft. 

Microsoft is working to build 
out the Managed Extensibility 
Framework for .NET and Sil- 
verlight, an open-source Code- 
Plex project to broaden native 
OS features, to extend COM- 
like features to other operating 
systems, he added. 

Mobile platforms are of par- 
ticular interest to Microsoft, 
Goldfarb said. He explained 



that capabilities such as SMS, 
phone dialing, and address 
books are features that Sil- 
verlight could exploit to create 
custom applications. 

Goldfarb said that Sil- 
verlight is a "bridge" to allow 
developers to build applications 
that "work everywhere" and 
"optimize everywhere." Sil- 
verlight also deals with the 
Internet Explorer 6 "legacy 
problem," where many web- 
sites have non-standardized 
code, he said. I 



CollabNet implements 'dynamic planning' in TeamForge 



BY DAVID RUBINSTEIN 

Agile software development has 
fundamentally changed the way 
the application development 
life cycle must be viewed, 
according to Collab Net's Chris 
Clarke. Requirements manage- 
ment, build, coding and QA: 
"Agile scrambles that all up." 

So, as CollabNet readies its 
TeamForge 5.3 distributed 
ALM suite for an early Decem- 
ber release, Clarke said engi- 
neers working on the tooling 



did a deep analysis of state-of- 
the-art ALM to see what is real- 
ly needed to do agile develop- 
ment well. 

What they came up with, he 
said, is the notion of "dynamic 
planning" — the joining of the 
scope tree with the planning tree 
in a single view that can adjust to 
changes that agile development 
is geared to handle. 

"The basic architectural 
mechanics of agile boil down to 
the planning tree — model 



backlogs, time boxes — and the 
scope tree, which involves an 
epic, stories, tasks and 
parent/child relationships. We 
spent a great deal of time 
rearchitecting the fundamental 
mechanics of how we track 
these things," Clarke said. 

TeamForge 5.3 provides 
planning folders to manage 
backlogs, Clarke said, and the 
ability to get a burn-down chart 
at any arbitrary level of hierarchy 
you wish. "We are not prescrib- 



ing religion in a can," he said. 

"We do provide a starting 
point using a specific process, 
but you can adopt it to any 
process you use. There is no 
fixed definition of what an epic 
is, or what a story is." 

The new release will have 
the ability to plug into either 
the Eclipse or Visual Studio 
IDEs, providing desktop access 
into the planning tools via the 
development environment, 
Clarke added. I 
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PDF doesn't have to mean 
'pretty daroed frustrating' 
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The Portable Document Format 

is evolving to 

meet needs of the future 



BY ALEX HANDY 




The world has awakened to the power of 
portable document readers. Devices 
like Amazon s Kindle and the Barnes & 
Noble s Nook have put portable documents 
into the pockets and purses of bookworms. 
With these new devices has come a wave of 
new document formats, but it is the PDF 
that remains the most important document 
format for business. 

Last year, PDF became an ISO stan- 
dard, and in the process, moved away 
from its past of evolution and change. 
While the ISO will certainly 
keep PDF up-to-date over 
time, the day-to-day stresses 

continued on page 23 ► 
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PDF is evolving to meet future needs 



< continued from page 21 

placed on the format by the 
needs of Adobe are no longer 
an issue. 

In the past, PDF belonged 
entirely to its creator, Adobe 
Systems. Since its creation in 
1993, it's been a bumpy road 
for this document format. 
Along that road, Adobe has 
repeatedly changed the specifi- 
cations for PDF, including one 
wholesale break with the past 
that left non-Adobe software 
out in the cold for a time. But 
now, thanks to the ISO, PDF is 
destined to remain static. 
Developers will no longer have 
to hit a target in motion. 

That's not to say that there 
won't be changes to the speci- 
fication, or even new types of 
PDFs to deal with. The ISO 
will be seeing a lot of PDF 
activity next year as new stan- 
dards, such as PDF/E, 
PDF/E-2 and PDF 2.0, wind 
their way through the stan- 
dards processes. 

Betsy Fanning, of AIIM 
International, is the secretary 
for a number of PDF commit- 
tees, all of which are working 
on new or updated standards 
for PDF. She said that the 
PDF/E team has been busy 
working on new standards for 
storing engineering documents 
inside of PDF. This engineering 
standard includes support for 
3D models, allowing product- 
engineering documents to 
include renderings of the final 
product or pieces. 

PDF/E-2, on the other 
hand, is an effort to build 
PDF/A for engineers. PDF/A is 
for archiving documents, but as 
a stripped-down standard 
designed for saving space, 
PDF/A can't handle those 3D 
renderings. 

As such, the PDF/E team 
has created PDF/E-2, which is 
effectively PDF/A with support 
for 3D objects. PDF/E-2 may 
eventually become a part of the 
PDF/A standard, but Fanning 
said that it was created now 
because engineers needed a 
solution immediately, and at 
present there are no plans for a 
merge. 

For the disabled user, 
PDF/UA seeks to create a stan- 
dard for PDFs that are compat- 
ible with a screen reader and 
other utilities used to help dis- 
abled users. "PDF/UA is for 
how PDF documents work with 



assistive technology," said Fan- 
ning. 

"That document is being 
worked on at the ISO level, 
though it originated here in the 
U.S. It is at the committee-draft 



level, which means it's still kind 
of like a soft Jell-O. We're hop- 
ing at the end of the 2010 ISO 
meetings it'll go to draft inter- 
national standard." 

Draft International Stan- 



dard is the final step before 
becoming a full-fledged ISO 
standard. 

PDF 2.0 is also on its way 
toward becoming a standard. 
Fanning said it is far too early 



to talk about the potential 
changes for that specification, 
however. 

"ISO standard 32000-2 is 

going to be PDF 2.0. It's at the 

continued on page 24 ► 




What are you looking for in a PDF solution? 



Amyuni PDF Suite 4.0 New Features 

■ Support for a wider range of PDF files such as 
PDF 1.7 and the compressed XRef table format. 

- The addition and extraction of attachments to 
and from PDF files. 

■ Exporting capabilities of PDF files into XAML to 
view from a Web page with Silverlight controls. 

■ Updated PDF/A engine ensures Acrobat 9 
compatibility. 

■ Improved file processing speed of PDF files that 
contain large graphics. 

JPEG2000 compression in addition to 
decompression. 
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PDF Converter 

- Certified for Windows 7 and Windows 2008. 

- Generation of layered PDF files for CAD and other applications. 

- Improved support for CJK languages and custom CMAPs. 

■ Generation of industry standard PDF/X-1 and PDF/X-3 PDF files. 

- Resaving capabilities of PDF files using PDF 1.4. 1.5. or 
PDF/A formats. 

PDF Creator 

- Loading, creation, and display of layered PDF files. 

■ CJK file support, with the ability to specify the location of 
custom CMAPs. 

Text anti-aliasing for better on-screen legibility. 

Internal PDF file structure access through comprehensive class 
architecture. 

- The ability to print a single page to multiple sheets or multiple 
pages to a single sheet. 



www.amyuni.com 



USA and Canada 

Toll Free: 1 866 926 9864 

Support: (514) 868 9227 

Info: sales@amyuni.com 



Europe 

Sales: (+33) 1 30 61 07 97 

Support: (+33) 1 30 61 07 98 

Customizations: management@amyuni.com 



AMYUNI'- 

Technologies 



24 



SPECIAL REPORT 



Software Development Times . December 15, 2009 



www.sdtimes.com 



Portable Document Format is evolving 



< continued from page 23 

committee draft stage. It's like 
the Jell-O was just poured into 
the mold," said Fanning. 

No matter what type of PDF 
you're working with, however, 



it's not the new files that cause 
the most headaches. The older 
a PDF file is, the less newfan- 
gled features can be used with 
it, restricting developers to old- 
er tools and functions. While 



the PDF standard is solid now, 
it's wayward past can make 
things sticky for developers sad- 
dled with archives of old docu- 
ments or a legion of outdated 
client-side applications. 



Dany Amiouny, CTO of 
PDF-generation and conver- 
sion software company Amyu- 
ni, said that the biggest prob- 
lem he sees for developers is 
the proliferation of alternate 
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standards. "The PDF format 
has evolved a lot during the 
past years, and there are many 
PDF tools out there that gen- 
erate all kinds of PDF files," 
he said. 

"You can find all kinds of 
PDF files with all kinds of fea- 
tures in them, which makes 
PDF not exactly a standard. 
This is why Adobe has come out 
with standards like PDF/A for 
document archivers. 

"The newer files are more 
problematic than the older 
files," he continued. "For 
example, about three years 
ago, Adobe changed the for- 
mat of the file in such a way 
that any older versions of PDF 
readers are not able to read 
new PDF files. They changed 
the internal binary format of 
the PDF file." 

But compatibility headaches 
don't end there, said Amiouny. 
"One pitfall is to use fancy new 
features that are in the format," 
he said. 

"We can quickly fall into the 
trap of seeing a new feature and 
saying, 'Let's go and use that.' 
This makes our customers 
unhappy with the product. 
PDF/A or PDF/X have specifi- 
cations that will not allow the 
use of new features." 

These specifications, he 
said, are stripped down for 
archiving and XML storage 
respectively "What we try to do 
is use new features only when 
it's absolutely a necessity. We 
expect people are using only 
the PDF 1.5 or 1.4 feature set," 
he added. 

BAD SELF-IMAGE 

Further pitfalls can come at 
the hands of embedded 
objects, such as images, videos 
and external links, said Andrew 
Cochran, CEO of ceTe Soft- 
ware. "There are only certain 
image formats that are sup- 
ported. When we get an image 
from a developer, we have to 
make that into something that 
can be presented in the PDF," 
he said. 

"Memory usage on the out- 
put is another thing. If someone 
uses the same image multiple 
times in a PDF document, you 
can use it individually or once. 
If you can share those, you can 
increase performance as well as 
reduce the output size of the 
PDF- 
All of these compatibility 
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to meet future needs 



issues are magnified when 
PDFs are coming from non- 
Adobe sources. When pulling 
information from a website or 
Word document, the challenges 
to developers can increase as 
parsing and output become 
closely tied together. 

"Conversion was one we 
saw [becoming popular] for a 
long time," said Cochran. 
"People wanted to convert 
office documents and store 
them. We're releasing a con- 
verter product that does that. 
We also have an embedded 
viewer if developers don't want 
to rely on an external viewer. 
This is embeddable in a Win- 
dows Forms application." 

All of these issues aren't like- 
ly to be resolved overnight, but 
the evolution of PDF as a stan- 
dard within the ISO should 
help to alleviate the creation of 
new problems and incompati- 
bilities, said Cochran. 

Amiouny agrees. He said 
that he expects the PDF stan- 
dard to become even more 
popular now that those with 
vested interests in the format 
can take part in its evolution. 
Chief among these entities, 
predicted Amiouny, is the gov- 
ernment. 

"Because PDF is used so 
much in all kinds of govern- 
ment forms and tax prepara- 
tions and so on, government 
agencies have to put work into 
how the format should evolve," 
said Amiouny. 

As the demands for enter- 
prise document retention and 
creation continue to increase, 
Amiouny and Cochran both 
expect the future to be print- 
able and portable. 

CREATING PDFS 

"When I started looking at 
PDF, I was hoping it would be 
that easy," said Cochran. "But 
the specification is complex and 
large. It's not a straightforward 
thing to create a PDF docu- 
ment." 

Cochran's company makes 
DynamicPDF, a set of class 
libraries designed to deal with 
the format in an enterprise 
environment. 

"The biggest thing is that it's 
hard to create a PDF in one 
pass. You have to first get all the 
info about the document, then 
you have to create the docu- 
ment. It's a two-phase process," 
said Cochran. "I wouldn't say it 



was extremely complicated, but 
it wasn't what we were used to 
working on [for] websites. 
There, as you encounter the 
data, you spit it to the browser. 
With a PDF, you can't do that. 



"You have to understand 
the fonts, the widths of the 
characters, and how to break 
the lines. Anything that effects 
the pagination is what you have 
to understand. You have to lay 



it out before you output it. You 
have to calculate how much of 
that text is going to fit on the 
first page." 

Unfortunately for develop- 
ers, these types of formatting 
problems are increasingly 
falling on their shoulders, 
thanks to corporate document 
retention policies and the ever- 



increasing need for print-on- 
demand. 

"In the beginning, PDF was 
used in specialized applica- 
tions," said Cochran. "Now 
most development teams are 
encountering a need for PDF. 
It seems to me like a lot of 
developers have a hard time 
avoiding PDF these days." I 
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FROM THE EDITORS 

With touch, Microsoft 
has the advantage 

Attendees of Microsoft's Professional Developer Conference must have 
been delighted — truly touched — by the unexpected gift of a free Win- 
dows 7 notebook. By delivering the hardware, Microsoft was also making a 
point about a key feature of its consumer platform: support for touch. We 
hope hardware and software makers leverage the potential of the platform. 

Microsoft has been an early enthusiast of direct-to-screen input. Its 
Tablet PC initiative, launched in 2005 for Windows XP, offered a great 
deal of promise, but the compromises inherent in the hardware and lim- 
ited software support beyond a few showcase applications kept the hard- 
ware out the mainstream. While Windows Vista improved the tablet 
infrastructure, the platform didn't gain much traction. 

A true touch-screen goes beyond the ink-based experience. As shown 
by Apple's iPhone user interface, fingers offer a more intuitive UI than a 
stylus. Desktop computers, such as HP's TouchSmart PC family, have 
become modest successes and have won rave reviews. 

Equally impressive, but also out of the mainstream, is Microsoft's Surface 
system. According to Microsoft, interest in the platform is growing quickly. 
While the hardware is expensive and has limited applications, some of the 
underlying technology has found its way into Windows 7. . . and into the 
touch-equipped Acer notebooks that Microsoft gave away at PDC. 

We believe that touch-screens are about to go mainstream in desktop 
and notebook computers. If we're right, there's a huge opportunity for 
developers, and clear benefits for consumers and enterprises. 

What does touch need to take off? Software support in the operating sys- 
tem; Microsoft has that covered with Windows 7. We also need to see broad 
availability of the hardware in desktop and notebook PCs, just as we saw 
with CD-ROM drives, Ethernet interfaces and WiFi. Until developers see 
a lot of consumers with hardware, they won't build applications; until con- 
sumers see applications, they won't spend extra on hardware. Prices need 
to drop and choices need to expand, so that buying a touch-equipped desk- 
top monitor or notebook computer becomes a no-brainer. 

It's clear that Microsoft has a unique opportunity here to promote Win- 
dows and innovation. The company's traditional platform rival, Apple, is 
"thinking different" by denying interest in tablet or touch-screen com- 
puters, but rumors have Apple working on a touch-enabled large-format 
iPhone. Of course, it never pays to underestimate Steve Jobs, but for now, 
Microsoft has its finger on the pulse of desktop and notebook computing. 

With Web APIs, think architecture 

The agile enterprise seemingly is built as much on SOA as on Scrum, 
and on code reuse as much as refactoring. When you consider the 
tremendous wealth of Web-based application programming interfaces 
currently available — with more and richer APIs appearing every week — 
the temptation to use them is becoming seemingly irresistible. 

SD Times urges caution when it comes to incorporating Web APIs into 
enterprise applications, and even more into commercial applications that 
you may be delivering to commercial clients. That's not to say not to use 
them: As with mashups, host applications and cloud-based apps, services 
delivered by Web-based APIs are an important part of a toolkit. 

On the other hand, as with all third-party resources that you're using in 
your software, do your due diligence. Know who is building and supporting 
those resources. If you're exposing data, be sure you are clear about the 
risks. Understand the costs, service-level guarantees and support structures. 

But more importantly, don't be seduced by the sheer availability of a 
cool Web API. Make sure that third-party APIs fit your application archi- 
tecture, not the other way around. The last thing you want to do is base 
your own apps on a third-party resource that you don't control and which 
may not fit into your own application infrastructure. That's where agile 
becomes a fast road to a dead-end street. I 



LETTERS TO THE EDITOR 

Evolution of a data blob 



Sir: 

I am an old-timer, so old-timer that 
my first computer language was not 
even COBOL, but Assembler 360. On 
the other hand, I did advance with tech- 
nology and learned some new tricks 
when I needed them. Please allow me to 
do a reality check with you regarding the 
article, "Not Your Daddy's Database" 
(Nov. 15, p. 22) Let's do it via a back-to- 
the-future technological trip. 

In the beginning, there was the 
sequential file, an amorphous blob of 
information that only via meta-data 
(some predefined structure, some hints 
in the data itself and some logic in the 
program) had you even a remote chance 
to access the actual information. And 
yes, you needed to READ the whole 
blob (sequentially, piece by piece) in 
order to actually access the data. 

That was not particularly efficient or 
useful, so here came the Indexed 
Sequential file, a set of key-value blobs 
of amorphous data, that only via meta- 
data (etc.) had you even a remote 
chance to access the actual information. 
Yet the possibility of accessing any par- 
ticular blob by the key-value index was a 
vast improvement. 

Then came the hierarchical database. 
Data was not in amorphous blobs any- 
more (although you still had enough 
rope to make it an amorphous blob if 
you so chose) but organized in cabinets 
and drawers. 

Then came the network (or multi- 



hierarchical model), which improved on 
the previous form in that you could 
access the data via many paths, not only 
one. This was efficient, fast, accessible, 
organized and whatnot. There was only 
one flaw: The model was navigational 
and you would have to navigate all the 
relations on your own. And you could 
actually create relations that would 
oppose the model if you so chose. (And 
you still could make any individual piece 
of information into an amorphous blob 
of information, etc.) 

Then came the relational model! 
Navigation was out, optimization was 
done by the database engine, and the 
data was strongly typed and could not 
become an amorphous blob (until this 
capability was happily added.) What 
can I tell you: Nirvana, or so we had 
thought! 

But that was not good enough, so 
here come the new models that allow us 
to create amorphous blobs of data that 
are stored in cabinets of key values. . . 

'Nuf said. 

Ze'ev Atlas 

WHAT DO YOU THINK? 

SD Times welcomes feedback. Letters 
should include the writer's name, com- 
pany affiliation and contact informa- 
tion. Letters become the property of 
BZ Media and may be edited for space 
and style. Send your thoughts to 
feedback@bzmedia.com. 



Cross-site scripting 
is the No. 1 vulnerability 



DATA WATCH 



Cross-site scripting leads all vulnerabilities in overall class population, according to 
the Fall 2009 Website Security Statistics Report from website vulnerability management 
company WhiteHat Security. This graph shows the most frequently occurring vulnerabilites 
to websites: 
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Wrestling with scaling software agility 



Agile champions spend a lot of time 
trying to communicate the agile 
premise to the executives in their orga- 
nization. The difference in context 
between the champion and the execu- 
tive often makes it a difficult conversa- 
tion. A Scrum Master versed in behav- 
ior-driven design is not always able to 
relate to the frustrations of a sales exec- 
utive who gets free advice on how to sell 
from everyone and his grandmother. 

Conversely a CFO does not neces- 
sarily understand why unit test coverage 
on the company's legacy code is still 
inadequate after a full year of invest- 
ment in agile methods that embrace 
refactoring as a core practice. 

To bridge the chasm through this 
article, we resort to role-playing. Ryan 
Martens plays the Agile Champion; 
Israel Gat plays the Skeptical Executive. 
Metaphorically speaking, each one tries 
to wrestle the other to the ground. 

Note that the two in reality understand 
each other extremely well and rarely are 
they of different opinions on the funda- 
mentals of agile in real life... 

How do I to assess and mitigate the 
risks of adopting agile? 

The Skeptical Executive Asks: I liked 
the materials you sent me about the 
benefits of agile development. I am 
impressed with the opportunity to apply 
agile practices in conjunction with Lean 
in my company. Having said that, I am 
not so comfortable yet that I have a good 
handle on the risks involved in large- 
scale agile deployment. I am not talking 
"only" about execution risk; I am talking 
about competitive risk, market risk, 
branding risk, monetary risk and so on. 
How do I to assess these risks of adopt- 
ing agile, and how do I mitigate them? 

The Agile Champion Responds: Let's 
start with a definition of risk from David 
Anderson's talk at the agile 2009 confer- 
ence. He said, "Risk is the likelihood and 
magnitude of the difference between 
the desired outcome and the actual out- 
come." 

This requires us to understand your 
desired outcomes, how this agile imple- 
mentation ties to your current strategies, 
and how likely you are to attain those 
goals if you do not work to scale the ben- 
efits of software agility across your organi- 
zation. Most successful agile implementa- 
tions have been done incrementally and 
iteratively with a focus on the highest-val- 
ue and highest-risk projects, and this 
approach mirrors and reinforces the agile 
approach to development. 

As we know, this adoption approach 
requires a prioritized backlog of work 
that is visible to the whole team, a road 
map of releases or transition steps, and a 
shared team commitment to making it 
happen. If you have these, you can deliv- 
er your change efforts in short cycles with 



feedback and actively mitigate the risks. 

How do we balance what our execu- 
tives need to know and the very lim- 
ited time on their hands? 

The Skeptical Executive Asks: Our 
company is not deep into technology; we 
are in the business of utilizing technology. 
Invariably our focus is on the needs of the 
customer, whether internal or external. 

We have been successful in harnessing 
new technologies and methods to create 
value for our customers without acquiring 




deep expertise in the technologies we use 
in our products. For example, I would 
expect our vice president of technology to 
be knowledgeable about agile and Lean 
development, but I can't demand the oth- 
er vice presidents devote much time to 
this subject. How do we strike the fine 
balance between what our executives 
need to know about agile and the limited 
time on their hands for doing so? 

The Agile Champion Responds: Be 
open and honest with other VPs about 
your work, but do not over-promote the 
benefits until you have gotten some suc- 
cess and radically reduced risk. Once 
you can show tangible benefits and 
implications of a technology organiza- 
tion using agile methods, it will be time 
to introduce and talk about these con- 
cepts with other VPs. 

Jim Highsmith's "Agile Project Man- 
agement" introduces the concept of 
"delivering value over constraints" as a 
guiding idea for agile organizations. You 
will certainly want to introduce other 
executives to that model and the innova- 
tions in organizational and technical 
infrastructure, as well as changes in your 
methods and tools that will allow your 
organization to radically improve. 

How do we attain effective report- 
ing in a heterogeneous development 
environment? 

The Skeptical Executive Asks: Let's 
place agile methods in the context of oth- 
er software processes we use at our com- 
pany. Even if agile development were to 
sell like hotcakes, we will be running a 
heterogeneous environment — part agile, 
part waterfall, part ad hoc — for a long 
time. When we review the whole picture, 
we cannot compare apples to oranges, 
using one set of metrics for waterfall and 



another one for agile projects. This is not 
only a question of reporting, it is a matter 
of being able to effectively govern our 
portfolio. How do we attain effective 
reporting and governance in a heteroge- 
neous development environment? 

The Agile Champion Responds: If an 
organization manages a project portfolio, 
it easily gets traditional metrics of earned 
value, remaining scope, quality, costs, 
risks, and resource allocation off of mixed 
project environments and into its portfo- 
lio management system or process. Agile 
adoption will be limited at first, and your 
portfolio management approaches will 
not change. However, the program man- 
agers working with the agile teams will be 
able to adjust to portfolio changes more 
easily than their non-agile counterparts. 

While it is true that agile teams will 
use different tactical metrics to assess 
their performance and maturity, those 
metrics do not go into the portfolio 
process. Though there is much to gain 
from a more agile and Lean portfolio 
approach, it is not one of the first things 
we encourage groups to put into their 
organizational change backlog. 

Why would investing in agile be more 
strategic to our company than invest- 
ing in other areas of opportunity? 

The Skeptical Executive Asks: Con- 
sider the money needed to "refactor" a 
company to be agile in the truest sense 
of the word. We can take that budget 
and apply it to any number of initiatives 
we want to roll across our business. Why 
should we invest it in agile development 
instead of other areas? 

The Agile Champion Responds: As 
you allocate resources, understand that 
agile is a systemic change. It drives costs 
down, quality up and service levels high- 
er by making the entire process leaner, 
the entire staff more responsible, and 
the customer more involved. 

This change does not happen over 
night, and short-term needs cannot be 
ignored. For this reason, consider a two- 
pronged approach to adoption that 
addresses short-term needs but focuses 
a majority of the improvement resources 
on the more strategic agile adoption. 

Ultimately the ROI of agile adoption 
will come from how well you focus to 
enable your core market differentiation 
as a low-cost provider, service leader or 
market innovator. Agile efforts should be 
focused at the strategic efforts in your 
company first. These are efforts that dif- 
ferentiate you and tend to have higher 
market and engineering risk. This is the 
sweet spot for agile in any company. I 

Ryan Martens is founder and CTO of 
Rally Software Development, which sells 
tools for agile development. Israel Gat is 
a senior consultant with the Cutter Con- 
sortium's agile practice. 
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Big surprise at PDC? No surprises! 



The biggest surprise from the recent 
Microsoft's Professional Developers 
Conference was the lack of surprises. 
We've gotten used to the PDC being the 
place where Microsoft pitches new tech- 
nologies to the harder-core developers, 
but this year, the PDC was noticeably 
about technologies coming to fruition. 

It was a welcome change. 

With Windows 7 doing well and 
Office 2010 coming down the pike, 
Microsoft has its best one-two punch 
since the mid- to-late '90s. For the first 
time in a long time, developers can 
develop for those core platforms with 
confidence that new features will be in a 
lot of hands. 

Microsoft is trying to get back into a 
three-year cycle between Windows 
releases and, to do so, would have to ship 
Windows 8 in 2012. Windows 8 is planned 
to be a "major" release, but even so, Win- 
dows is unlikely to gain radical new fea- 
tures until after undergoing a probably 
painful rearchitecting for the manycore 
era. I expect that Windows 8 will tweak 
the Windows 7 interface, and then we'll 
have the face of Microsoft for the better 
part of the twenty-teens. 

The only hope for a revolution to the 
desktop user interface is the prospect of 
a breakthrough in voice and visual inter- 
faces (the same prospective break- 



through that's been luring researchers to 
their doom for decades). 

Of course, the revolution has already 
come in the form of smartphones and the 
cloud. Whatever machine holds your e- 
mail is your "personal computer," and all 
else are, at best, accessories and, at worst, 
annoyances. Ray Ozzie was right to see 
that a "seamless mesh" of data 
and devices will drive demand 
in the future. 

Windows Azure, which will 
launch in January 2010, now 
has a Content Delivery Net- 
work, and will gain AppFabric, 
which includes the Velocity 
caching technology and the 
Dublin management technol- 
ogy for Workflow and Com- 
munication Foundation appli- 
cations. Today, most of the talk about 
Azure's cloud services relates to server 
operations, but the path to unified ser- 
vices for "three screens (phone, PC, TV) 
and a cloud" is firming up. 

Briefly mentioned was support for 
Windows Server Virtual Machine sup- 
port in Azure, which will likely evolve 
into a competitor to Amazon's Elastic 
Compute Cloud's on-demand comput- 
ing. More immediately, Microsoft pre- 
sented two interesting marketplaces: 
Pinpoint, which is essentially an app 
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store for Azure-based applications, and 
Dallas, a marketplace for large datasets 
(Dallas, naturally, is sold via Pinpoint). 

Service descriptions on Pinpoint too 
often resemble an explosion at the buzz- 
word factory, but hopefully that will dis- 
sipate over time. Dallas is already 
impressive. I don't know exactly how a 
business application could 
use Mars Rover imagery, but 
you'd have to be a grouch to 
not be impressed by the pos- 
sibility. Grouches might be 
more interested in global 
weather forecasts or traffic 
and road-construction data, 
which are also available. 

Those who've used Sil- 
verlight won't be surprised 
that it's moving into a starring 
role in Microsoft's UI plans and that 
development of this rich Internet appli- 
cation platform continues at a blistering 
pace. 

The biggest technical addition, by far, 
in Silverlight 4 is printing support. In 
addition, Silverlight gains a huge num- 
ber of controls for forms, a design sur- 
face in Visual Studio 2010, and an 
impressive set of text capabilities. 

Silverlight also gains access to Web- 
cams and native audio, checking off 
another mark in its feature comparison 
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with Flash. 

Rather than the technology, what 
makes Silverlight so important is the 
clear distinction that Silverlight will 
become the dominant runtime for deliv- 
ering managed code. There will still, of 
course, be native applications that take 
advantage of the latest APIs and special- 
ized hardware, and deliver the highest- 
end performance, but Silverlight 4, with 
it's out-of-browser experience, printing, 
and improved access to files, is going to 
be a great application for delivering 
cross-platform solutions. 

A new version of ASP.NET MVC was 
unveiled at PDC. Readers may recall 
that I am a big fan of ASP.NET MVC 
and won't be surprised to hear that I rec- 
ommend the update. 

Google's open-source release of 
Chromium OS effectively stole the 
thunder from discussions of Internet 
Explorer 9, which Microsoft promises 
will be really, really fast. 

Oh, there was one major surprise at 
PDC. All attendees were given a multi- 
touch-compatible Tablet PC, which 
shows that even in a recession, Microsoft 
can take the swag-stakes to a new level. 
A too-good-to-fact-check rumor imme- 
diately circulated that this spawned a T- 
shirt reading, "I went to PDC '08 and all 
I got was a lousy hard drive." 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 



Seriously pragmatic agility 



Most advocates of agility tend to rec- 
ommend the same practices and 
congregate around the same tools. This 
uniformity stems from a common shared 
experience among practitioners. This is 
because the vast majority of advocates 
are consultants. And typically, consulting 
engagements fall into two types: saving a 
project that has gone off course, or 
teaching the techniques to a team that's 
new to agile. Always being around peo- 
ple who know little about proper imple- 
mentation of agile tends to confer the 
sense of there being one true path. 

Consultants are rarely hired by orga- 
nizations that have successfully imple- 
mented agility, and are sufficiently capa- 
ble to change individual practices to 
align with their corporate goals and busi- 
ness needs. But in fact, those organiza- 
tions are the ones that have something 
important to say — more so than the fail- 
ing projects or not-yet-agile sites. The 
road to success is to study success, not 
simply avert failure. 

Earlier this month, I had the oppor- 
tunity to do a deep dive into Parasoft, a 
company that lives by agile but has mod- 
ified it for its needs. My guide was com- 
pany cofounder Adam Kolawa, who has 
spent years writing about software 
development and testing. So, he is 



replete with ideas and perspectives that 
can be validated in part by the fact that, 
after 20 years of creating development 
tools, his business is still thriving. (Trivia 
question: How many other such vendors 
can you name? Two? Three?) 

Kolawa implements agile with a 
unique set of changes to core practices. 
These focus on two goals: highest possi- 
ble quality, and best possible 
ROI on developer's time. He 
views the goals as synergistic 
rather than opposed. 

Parasoft uses test-driven 
development (TDD). Howev- 
er, it's nothing like the TDD 
you hear about regularly. For 
every task, developers must 
write exactly one test before 
coding. A lot of time is spent 
on determining what test will 
most properly encapsulate the function- 
ality of the task. This test, which is fre- 
quently a functional test (but occasional- 
ly a unit test), must be written out fully 
and completely before coding begins. 

Kolawa, who brings a mathematician's 
perspective to automated software devel- 
opment, says his analysis shows that the 
first test, if done right, gets most of the 
design right. Additional tests add cruft to 
the test suite and rarely raise the quality 
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of the code enough to justify their cost. 

In my own experience, I pointed out, 
it's often not until I write my fifth or sixth 
test that I discover a defective condition. 
Kolawa replied: "You're probably writing 
small unit tests and you're not using stat- 
ic source-code tools that do data flow 
analysis." Right on both counts. 

The second part of Kolawa's response 
is a key differentiator from 
traditional agile practices. 
Parasoft does static code 
analysis with data flow analy- 
sis. It uses its own tools for 
this. The data flow examines 
call trees to see whether any 
sequence of calls could cause 
a method far down the tree to 
throw a null pointer excep- 
tion. Other conditions, such 
as edge case errors, are also 
searched out in whole-program analysis. 
Between the original test and the 
intensive source code analysis, Parasoft 
reaches a base level of quality code. 
Next follows a detailed code review. Says 
Kolawa: "We do 100% code review cov- 
erage. Every single line of code is 
reviewed." If any infelicity pops up, it 
becomes a task, which generates a new 
test, and the cycle repeats. 

As time passes, Parasoft enjoys a 



regression suite of tests that thoroughly 
exercises every task using a codebase 
that's been subject to 100% code review 
and intensive static code analysis. For 
most organizations, this would be a good 
time to send it over to QA. Parasoft, 
however, has no separate QA team. 
Developers do all the testing. 

Kolawa explains that when it comes 
time to do the manual testing, all devel- 
opers work on getting it done together in 
sprints. I note that a precept of agility is 
that all developers are responsible for all 
the code. In practice, though, the UI 
developers still code the UI, the data- 
base guys worry about the data access, 
and the compartmentalization continues 
as it was in pre-agile days. By having all 
developers participate in testing, howev- 
er, they get a holistic view of the product 
and are more intimately aware of how 
the pieces integrate. Everyone is truly 
responsible for the project. 

It's hard to do justice to Kolawa's vision 
in one column. But if you can seize on the 
basics — writing one functional test for 
every task prior to coding, continuous 
source-code analysis with data flow, 100% 
coverage in software reviews, and full 
team participation in testing — you will 
have the basic tenets of a highly pragmat- 
ic implementation of agility. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
binstock. hlogspot. com. 
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Finally, the Itanium is profitable! 



Zeichick's Take 



Intel's 64-bit Itanium processor never 
got much respect from the main- 
stream enterprise server buyer. A set of 
more-established 64-bit chips based on 
the RISC (Reduced Instruction Set 
Computing) architecture, the rapid evo- 
lution of the 32-bit x86 archi- 
tecture, and then the 64-bit 
x86 extensions pioneered by 
AMD kept the VLIW-based 
(Very Long Instruction Word) 
Itanium in a money-losing 
niche for 10 years. But now it's 
profitable. Maybe. 

It's hard to believe that it's 
been a decade since Intel and 
Hewlett-Packard partnered to 
evolve HP's PA-RISC technology into 
Intel's Itanium processor. The goal was 
always to reach a broad market that want- 
ed an advanced parallel-processing chip. 
However, volume buyers never saw 
the benefit of Itanium's 64-bit VLIW 
architecture. Instead, they mainly kept 
purchasing commodity 32-bit CISC 
(Complex Instruction Set Computing) 




chips like the Intel Xeon. If there was a 
need for something more scalable than 
the 32-bit CISC chips, server buyers 
went for RISC processors like Sun's 
SPARC or IBM's POWER chips. 

Indeed, the only significant reseller 
of Itanium processors was HP, 
in some of its high-end systems. 
In part, Itanium's problems 
were technological. The first 
chips, which shipped in 2001, 
didn't deliver the performance 
that HP and Intel had 
promised. A scarcity of devel- 
opment tools was also a prob- 
lem; it was particularly hard to 
create optimizing compilers 
that would leverage Itanium VLIW 
design. 

While those problems were transito- 
ry — the second-generation chips, 
dubbed Itanium 2, were quite impres- 
sive — Itanium never stood a chance, 
particularly in the face of strong com- 
petition from the 64-bit extensions to 
the classic x86 architecture. The so- 



called x64 chips from AMD and Intel 
were a lot less expensive than Itanium 
2, and had the advantage that they 
would run both 64-bit and existing 32- 
bit x86 applications. 

The numbers speak clearly. Accord- 
ing to a May 2008 story in Computer- 
World: 

In fact Itanium holds only a sliver of 
the overall server market. Vendors sold 
about 55,000 Itanium servers in 2007, 
compared to 417,000 RISC servers and 
8.4 million x86 servers, according to 
Gartner Inc. Intel estimates that 184,000 
Itanium-based systems had been sold 
altogether by the end of last year. 

Imagine my surprise when I read a 
blog post from Ashlee Vance in the New 
York Times, "A Decade Later, Intel's Ita- 
nium Chip Makes a Profit." But, he 
adds, Intel won't confirm this. 

Do you develop software for Itani- 
um-based servers? Tell me what you 
think about the platform at 
feedback@bzmedia.com. I 

Alan Zeichick is editorial director of 

SD Times. Follow him on Twitter at 

twitter.com/zeichick. Read his blog at 
ztrek. blogspot. com. 
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A LOT OF TALK AROUND AGILE 

development these days is about scala- 
bility and distributed development, so 
large enterprises can benefit from the 
techniques. For organizations creating 
safety-critical software, such as the kind 
used in airplanes and traffic control sys- 
tems, there are other issues to consider. 

Jose Ruiz, a software engineer at 
AdaCore, is working with a team to 
develop a framework that will help the 
company's customers adopt agile prac- 
tices. Safety-critical software requires 
that certification standards be met, and 
that seemingly goes against one of agile 
development's prime tenets: be able to 
adjust to change quickly. 

"The certification process always is 
associated with a typical W development 
model of requirements, modeling, coding 
and testing at the end," Ruiz said. "Once 
all of the software and artifacts have gone 
through certification, it's costly and hard 
to introduce any modification." 

Yet one agile technique (continuous 
integration) is being used to create what 
Ruiz called continuous certification. This 
requires builds, tests and requirements to 
be deeply integrated, so that any change 
in the system triggers verifications and 
notifies developers about artifacts that no 
longer are valid and need to be redone. 

"In rigid development, you don't pick 
this up until the end, when it's most cost- 
ly to fix," Ruiz said. Using agile, he said, 
lets software evolve more easily and at a 
much lower cost. 

— David Rubinstein 



MICROSOFT GAVE PDC ATTENDEES 

free touch-screen laptops. It usually 
takes everyone out for a night at Univer- 
sal Studios. This year's investment in 
swag underscores just how seriously it 
takes natural interfaces. 

There are many possibilities for 
killer apps, such as games, that take 
advantage of the touch-screen. One of 
the keynote demos was a Silverlight 
puzzle, which was pretty neat. 
Microsoft has now armed some of its 
best developers with the hardware that 
they need to create those apps. I hope I 
am not disappointed. 

— David Worthington 

MICROSOFT RECENTLY ANNOUNCED 

that in 2009, the No. 1 search query 
entered into its Bing search engine was 
"Michael Jackson." The King of Pop out- 
did "swine flu" and "stock market," 
which were in the top 5 searches. The 
other two top queries were "Twitter" 
and "Farrah Fawcett." 

Strange coincidence that Microsoft 
unveiled Bing barely a month before 
Jackson's death on June 25. I bet when 
they were designing Bing, the folks at 
Microsoft had little idea that search 
engine hits would be initially led by a 
moon-walking pop singer whose heyday 
was around the time Microsoft released 
its first version of Windows. But I guess 
when you're trying to innovate for the 
future, it's never such a bad thing to 
bring a little of the past with you. 

— Jeff Feinman 
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CAVIUM ACQUIRES 
MONTAVISTA SOFTWARE 

Cavium Networks, a provider of semi- 
conductor products for processing in 
networking, wireless, storage and video 
applications, signed a definitive agree- 
ment to acquire Monta Vista Software 
for US$50 million, comprised of $16 mil- 
lion in cash and $34 million in Cavium 
common stock. The deal is expected to 
closed at some point this month. 

MontaVista provides multicore- 
embedded Linux operating systems, vir- 
ilization, development tools and pro- 
fessional services. 

After the acquisition, MontaVista is 
expected to run as a separate operating 
unit. Cavium will continue the Mon- 
taVista business model and support for 
embedded Linux. MontaVista will also 
maintain its own dedicated staff. 

EARNINGS: Hewlett-Packard reported 
net revenue for fiscal year 2009 of 
US$114.6 billion, down 3% from the pri- 
or year. Operating profit for the year 
was $10.1 billion and GAAP-diluted earn- 
ings per share was $3.14, down from 
$3.25 in the prior year. Net revenue was 
US$30.8 billion for HP's fourth fiscal 
quarter ended Oct. 31, 2009, down 8% 
from the same quarter a year earlier. In 
the fourth quarter, GAAP net earnings 
per share were $0.99, compared with 
$0.84 in the prior year. Non-GAAP earn- 
ings per share were $1.14, compared 
with $1.03 from a year ago. I 
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